Microsoft on Wednesday advised organizations using Active Directory to take a couple steps to protect against Kerberos resource based constrained delegation relay attacks. The steps to take and the advice arent exactly new, as Microsoft had offered similar advice in 2019 with Security Advisory ADV190023 . Microsoft also hardened Lightweight Directory Access Protocol LDAP channel binding on Active Directory domain controllers via Windows updates in 2020 . However, this hardening stopped short...

Read the full article at RedmondMag.com